84c636397d2329c5568200c90acebd38_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

84c636397d2329c5568200c90acebd38_JaffaCakes118
Size

388KB
MD5

84c636397d2329c5568200c90acebd38
SHA1

d3f109299d7ec550952c38c7762029a53def4e3d
SHA256

26d88190788133e452ea2c897c4b74c1ca6cced46d60602a3ccc5dd589760e18
SHA512

b2e307f8228d4b1db819387a6bbb8a58ca89727f5a99b2d707dc154f066d0e726cf4e97d2f86336828674cea997e4353d1d4b2c6bfa6e1fc1f58681744bf6661
SSDEEP

6144:jRAXIjJherLRzXQW/lU9dhG3vKDbgeXLm0MmSpNyS:jRAIjJh+VDT/lkECfRXpXS

Score

1^/10

Malware Config

Signatures

Files

84c636397d2329c5568200c90acebd38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8018b960ba51584f1f60fc7825388020

Code Sign

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4d
Certificate

Issuer

CN=KAqG

Not Before

11/06/2012, 08:39

Not After

31/12/2039, 23:59

Subject

CN=KAqG

Extended Key Usages

ExtKeyUsageCodeSigning

c0:54:b7:75:8d:37:41:18:ef:46:f8:0f:9a:ca:4d:de:0c:69:40:39
Signer

Actual PE Digest

c0:54:b7:75:8d:37:41:18:ef:46:f8:0f:9a:ca:4d:de:0c:69:40:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx

advapi32

RegCloseKey

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8018b960ba51584f1f60fc7825388020

Code Sign

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4dCertificate

Extended Key Usages

c0:54:b7:75:8d:37:41:18:ef:46:f8:0f:9a:ca:4d:de:0c:69:40:39Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 342KB - Virtual size: 341KB

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4d
Certificate

c0:54:b7:75:8d:37:41:18:ef:46:f8:0f:9a:ca:4d:de:0c:69:40:39
Signer

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 342KB - Virtual size: 341KB

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B